These cards highlight how jilaa handles your personal data. They are a plain-language summary — not a substitute for the full Privacy Policy below, which you should read in its entirety.
jilaa collects personal data you provide during registration (name, date of birth, contact details), identity verification documents, transaction records, and technical data generated during platform use such as IP address, device type, and session logs.
All data transmitted between your device and jilaa is encrypted using 256-bit SSL. Sensitive data at rest is stored using industry-standard encryption. Access to personal data within jilaa is restricted to staff with a legitimate operational need.
jilaa does not sell, rent, or otherwise transfer your personal data to third parties for marketing or commercial purposes without your explicit consent. Your data is used solely to operate the jilaa platform and meet our legal obligations.
Under the Philippine Data Privacy Act of 2012, you have the right to access, correct, delete, object to, and port your personal data held by jilaa. You may exercise these rights at any time by contacting jilaa's Data Protection Officer.
jilaa retains personal data for the minimum period necessary to fulfill the purpose for which it was collected. Financial and identity records are retained for a minimum of 5 years in compliance with Philippine anti-money laundering requirements.
For data privacy queries, requests to exercise your rights, or concerns about how jilaa handles your personal data, contact our Data Protection Officer. For unresolved complaints, you may escalate to the National Privacy Commission of the Philippines.
jilaa Casino is an online gaming platform designed for Filipino players and operating in alignment with the requirements of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission (NPC). This Privacy Policy sets out jilaa's obligations and your rights as a data subject in connection with jilaa's collection and processing of personal data.
jilaa takes the protection of personal data seriously. We collect only what we need to operate the Platform and fulfil our legal obligations, and we take technical and organisational measures to protect that data against unauthorised access, loss, or disclosure.
This Privacy Policy applies to all personal data collected by jilaa in connection with your use of the jilaa website, live chat support, email communications, payment processing, and any other services offered through the jilaa platform. It should be read together with jilaa's Terms & Conditions.
jilaa collects personal data from you in the following categories and circumstances:
When you create a jilaa account, we collect the information you provide during the registration process, including your full name, date of birth, Philippine mobile number or email address, username, and password (stored in hashed, non-recoverable form).
To comply with anti-money laundering obligations and our age verification requirement (21+), jilaa may request copies of government-issued Philippine identification documents (such as an SSS card, PhilHealth ID, driver's licence, or passport), proof of current address, and documentation confirming ownership of the payment method used.
jilaa records all deposit and withdrawal transactions associated with your account, including transaction amounts, timestamps, payment method references, and transaction status. We do not store complete card numbers or full GCash/Maya account credentials — payment instrument data is tokenised by our certified payment processors.
jilaa records data about your gaming activity on the Platform, including game sessions played, wagers placed, outcomes, session durations, and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement purposes.
When you access jilaa, our servers automatically collect certain technical data, including your IP address, device type (mobile, tablet, desktop), operating system, browser type and version, network provider (e.g., Globe, Smart), referral URL, and session timestamps.
If you contact jilaa via live chat, email, or any other support channel, we retain records of that correspondence, including the content of messages, timestamps, and the outcome of any support requests or disputes raised.
jilaa processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:
| Processing Purpose | Legal Basis |
|---|---|
| Account creation and management | Performance of a contract (your jilaa account agreement) |
| Processing deposits and withdrawals | Performance of a contract; compliance with legal obligation |
| Age and identity verification (KYC) | Compliance with legal obligation (PAGCOR, AMLC requirements) |
| Anti-money laundering monitoring | Compliance with legal obligation (RA 9160 as amended) |
| Fraud prevention and security | Legitimate interest of jilaa; compliance with legal obligation |
| Responsible gaming monitoring | Legitimate interest; compliance with PAGCOR guidelines |
| Customer support communications | Performance of a contract; legitimate interest |
| Marketing communications | Consent (you may withdraw consent at any time) |
| Platform analytics and improvement | Legitimate interest of jilaa |
jilaa uses your personal data for the following specific purposes:
jilaa does not sell, rent, or trade your personal data. We share personal data with third parties only in the following circumstances and categories:
jilaa shares transaction-related data with certified payment processors (including GCash, Maya, and Philippine bank partners) as necessary to facilitate deposits and withdrawals. These processors operate under their own privacy policies and are bound by applicable Philippine financial regulations.
To deliver live dealer games, slots, and other certified gaming content, jilaa shares limited session data with licensed game providers. This data is used solely to deliver the gaming session and ensure fair play integrity. Game providers are contractually prohibited from using this data for independent marketing purposes.
Where jilaa uses third-party KYC or identity verification services to verify the authenticity of identification documents submitted by players, the relevant document data and biometric information (if applicable) is shared with the verification provider under a data processing agreement that restricts use to the verification purpose only.
jilaa will disclose personal data to government authorities, law enforcement agencies, the Anti-Money Laundering Council (AMLC), PAGCOR, or the NPC where required to do so by applicable Philippine law, valid legal process, or regulatory directive. jilaa will, where legally permitted, notify the affected account holder of such a disclosure.
jilaa uses third-party service providers for cloud hosting, data analytics, customer support infrastructure, and cybersecurity monitoring. These providers are authorised to process personal data only as instructed by jilaa and are bound by confidentiality obligations and data processing agreements aligned with DPA requirements.
In the event of a merger, acquisition, reorganisation, or sale of all or part of jilaa's business, personal data held by jilaa may be transferred to the successor entity as part of that transaction. Affected players will be notified in advance of any such transfer and the applicable privacy terms governing the transferred data.
jilaa uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and gather anonymised analytics data.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Required to maintain your login session, account security tokens, and core platform functionality. Cannot be disabled without breaking core features. | Session / up to 30 days |
| Functional | Remembers preferences such as language settings, game lobby filters, and notification preferences to personalise your experience. | Up to 12 months |
| Analytics | Collects anonymised data about how players navigate jilaa — pages visited, time spent, errors encountered — to help jilaa improve the Platform. No personally identifiable information is stored in analytics cookies. | Up to 13 months |
| Security | Detects unusual login patterns, bot activity, and potential fraud by tracking session consistency signals. | Session |
You may configure your browser to block or delete cookies. Note that disabling essential cookies will impact your ability to use the jilaa Platform, including maintaining a logged-in session. jilaa does not use cookies to track your activity outside of the jilaa website.
jilaa retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any longer retention periods required by law. The following minimum retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML / PAGCOR compliance |
| Identity verification (KYC) documents | 5 years from date of verification | RA 9160 (as amended) |
| Financial transaction records | 5 years from transaction date | RA 9160; tax record requirements |
| Gameplay / session logs | 3 years from session date | Dispute resolution; responsible gaming |
| Support / communications records | 3 years from last interaction | Dispute resolution; service improvement |
| Marketing consent records | 3 years from consent or withdrawal | DPA compliance; proof of consent |
| Technical / access logs | 12 months | Security; fraud detection |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using methods that prevent recovery. Where anonymisation is applied, the resulting data may be retained indefinitely for aggregate statistical purposes.
jilaa implements technical and organisational measures appropriate to the nature of the data processed and the risks associated with its processing. These measures include, but are not limited to:
In the event of a personal data breach that poses a real risk of serious harm to data subjects, jilaa will notify the NPC within 72 hours of becoming aware of the breach and will notify affected players without undue delay, in accordance with NPC Circular 16-03 and its amendments.
jilaa's primary data infrastructure is located within the Philippines. Where jilaa uses service providers, game providers, or cloud infrastructure with servers located outside the Philippines — for example, for content delivery network (CDN) services or global payment processing infrastructure — personal data may be transferred internationally.
Any international transfer of personal data by jilaa or its processors is subject to contractual safeguards that require the recipient to maintain data protection standards equivalent to those required under the Philippine Data Privacy Act. jilaa does not transfer personal data to countries that do not provide adequate data protection without implementing appropriate transfer mechanisms.
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jilaa:
You may request a copy of the personal data jilaa holds about you, along with information about how that data is processed and with whom it has been shared.
You may request correction of inaccurate or incomplete personal data held by jilaa. Some corrections (e.g., name changes) may require supporting documentation.
You may request deletion of your personal data where there is no longer a legitimate legal or contractual basis for retention. Note that legal retention obligations (e.g., AML record-keeping) may limit the scope of erasure requests.
You may object to processing of your personal data based on legitimate interest grounds, including profiling for marketing purposes. You may also withdraw consent for marketing communications at any time.
You may request a copy of personal data you have provided to jilaa in a structured, machine-readable format for the purpose of transferring it to another service provider.
If you believe jilaa has processed your data unlawfully or your rights have been violated, you may lodge a complaint directly with the National Privacy Commission of the Philippines.
To exercise any of the above rights, contact jilaa's Data Protection Officer as described in Section 15. jilaa will respond to verified data subject requests within 15 business days of receipt. Identity verification may be required before processing requests that involve access to or deletion of personal data.
The jilaa Platform is intended solely for adults aged 21 years and above in accordance with PAGCOR regulations governing online gambling in the Philippines. jilaa does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the account registration process, and additional KYC verification may be required at jilaa's discretion.
Where jilaa becomes aware that personal data has been submitted by an individual under the age of 21, the associated account will be immediately closed, all submitted personal data will be deleted from active systems, and any financial balance will be returned to the deposit source. If you believe a minor has created a jilaa account, please contact jilaa's support team immediately so that appropriate action can be taken.
jilaa sends promotional communications — including offers, new game announcements, and VIP programme updates — only to players who have opted in to receive such communications. Opt-in preference is collected during account registration and can be updated at any time from your jilaa Account Settings under the "Notifications" section.
Marketing communications from jilaa will always identify jilaa as the sender and will include a clear, functional unsubscribe mechanism. jilaa will process your opt-out request within 5 business days. Opting out of marketing communications does not affect the delivery of transactional communications necessary for account operation (e.g., deposit confirmations, withdrawal notifications, security alerts).
jilaa does not engage in cold marketing to individuals who have not registered a jilaa account. If you receive unsolicited marketing communications purporting to be from jilaa on platforms you did not register with, these are likely fraudulent — please report them to jilaa's support team.
jilaa reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. All updates will be published on this page with a revised effective date. Where changes are material — for example, where we propose a new use of personal data that is not compatible with the original purpose for which it was collected — jilaa will notify affected players through the Platform and/or registered contact details in advance of the change taking effect.
Your continued use of the jilaa Platform after a revised Privacy Policy has been published constitutes your acknowledgement of and, where required, consent to the changes. If you do not agree with an updated Privacy Policy, you may close your jilaa account by contacting support prior to the effective date of the change.
jilaa has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. The DPO serves as jilaa's primary point of contact for data subject rights requests, privacy complaints, and regulatory data privacy enquiries.
To exercise your data subject rights, raise a privacy concern, or request further information about jilaa's data processing practices, contact jilaa's DPO through the following channels:
If you are not satisfied with jilaa's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information about the NPC complaints process is available on the NPC's official website.
jilaa treats your personal data with the same care as your winnings. Deposit via GCash, play with confidence, and know your information is protected under Philippine law.
21+ Only. Gambling should be entertainment. Play responsibly. PAGCOR-aligned environment.